The 03.09.04 at 08:26, Joe Morris (NTM) wrote:
I'm getting an increasing number of spams with attachments that have the .pif extensions.
That is the Sobig.F virus. Like you said, it won't infect you, just tie up bandwidth.
Right... it is filling up my box, though. And I pay by the minute of connection :-(
I'm using fetchmail, postfix, procmail, spamassassin and AMaViS (which doesn't detect them, by the way). All of it from the default SuSE 8.2 with you patches.
Do you have antivir installed? AMaViS is just a program to pipe the mail through an antivirus program. I am using Anitvir for scanning email, having it update once a day through cron, and it has picked up this virus at least one a day for one user all week.
Ah... then I'll have to update it. The problem is that I would like the reject to happen as soon as postfix or whatever knows there is an attachement with "*.pif" in it, and abort the download. Amavis checks it after it is downloaded, I think.
One of the characteristics of this virus, it spoofs the sender. You know you didn't send it, whoever did had your address in their machine, either address book or internet cache.
I know...
Another postmaster autoreject complains that the recipient box is full - and returns to me the 100Kb attachment. Heck. Who configured that, I wonder?
An amazing waste of bandwidth...
Indeed! It is so, yes. Their servers must be smoking. I wish servers would do virus check, and spam check, as routine.
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
I didn't come from you.
X-) Of course not! That is the proof, precissely ;-) -- Cheers, Carlos Robinson